Customer Support System
Approved changes feed: RSS · Atom
cpe:2.3:a:sourcecodester:customer_support_system:1.0:*:*:*:*:*:*:*
part: a version: 1.0 update: *
| Vendor | Sourcecodester (f6c988b2-f9bb-51b9-8f02-f23eef2a7551) |
|---|---|
| Product | Customer Support System (a66ed5ca-ef56-5f7d-86e4-53017d0e7652) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-51281 |
vulnerable | 2026-06-08 06:16:17.313676 |
Details available
Cross Site Scripting vulnerability in Customer Support System v.1.0 allows a remote attacker to escalate privileges via a crafted script firstname, "lastname", "middlename", "contact" and address parameters.
Published: 2024-03-07T00:00:00.000Z
Updated: 2024-08-26T15:20:00.173Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49979 |
vulnerable | 2026-06-08 06:16:10.857632 |
Details available
A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensitive files within the application without requiring authorization.
Published: 2024-03-06T00:00:00.000Z
Updated: 2024-08-06T15:06:53.644Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49978 |
vulnerable | 2026-06-08 06:16:10.856997 |
Details available
Incorrect access control in Customer Support System v1 allows non-administrator users to access administrative pages and execute actions reserved for administrators.
Published: 2024-03-06T00:00:00.000Z
Updated: 2024-08-03T19:46:53.725Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49977 |
vulnerable | 2026-06-08 06:16:10.856480 |
Details available
A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the address parameter at /customer_support/index.php?page=new_customer.
Published: 2024-03-06T00:00:00.000Z
Updated: 2024-08-20T19:46:12.492Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49974 |
vulnerable | 2026-06-08 06:16:10.855316 |
Details available
A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the contact parameter at /customer_support/index.php?page=customer_list.
Published: 2024-03-06T00:00:00.000Z
Updated: 2024-08-15T20:35:26.810Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49971 |
vulnerable | 2026-06-08 06:16:10.854208 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49970 |
vulnerable | 2026-06-08 06:16:10.853514 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49969 |
vulnerable | 2026-06-08 06:16:10.852922 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49968 |
vulnerable | 2026-06-08 06:16:10.851095 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49548 |
vulnerable | 2026-06-08 06:14:29.163319 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49547 |
vulnerable | 2026-06-08 06:14:29.162749 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49546 |
vulnerable | 2026-06-08 06:14:29.162278 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49545 |
vulnerable | 2026-06-08 06:14:29.161864 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-49544 |
vulnerable | 2026-06-08 06:14:29.160172 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.